^% -^'^ 



\^]^W^m 89^(2000) OS^UB 



7 I? 



1511 lnt.CI G06F9/44 



l21l^aigl?E-- 086101163 1221*.P.B^ 



i57it43if?fiJSa(il • 



!53i - 

a 



S. falA/^r^mMf^ (BIOS) : ll^iS (a)^ 

^ • j.i!S^^A^^8tt?@sattsi • 



133 

m 

I 

i 

I 



— 1799— 



o 



(b.4) . m^m {bA)^mi^mW]^^ 



) 

A 

5. tt" 

g-4:^A/8«tBB&3^ (BIOS) ' nms: 
10. 3^$SiA/fiSl±SflS?^^:^E>r:«$^«§F-1i^ 

^3iA'S»fi;^ieit-^''t^- • -^mwz 

:i rig ^ 14 ^ ^ ^ - • ' : ^ ^ '^'^ 
20. BIOS ,> FLASH %Wt> ^ U- >C : 

^,5 If: ^ W # Ifl tt ft r-H U ^ is 

FLASHiaisftuii'nf'!^'; 

'rTff.ti5^6'3 FLASH ^.KSVliif.'-t 

1 i.tHifm^sS^^'JisisJ!^ iom,r®ii[§>;^^^c 

40. • K'-f' 



— isoo 



(3) 



;i^f^S^iflA/ioai§S^ (BIOS) ' 

•i^Tzmmmmmmm.^ • mmmm^ 
mm-mmnmm^M Bios-giff;>ffi 
•p^s^^i^tiK^^^^^ BIOS miff • 

^^t BIOS HJgf 5:1^^ •• 
{c)mi:Xmn^M BlOSMfrS^ - 

naff ^iiX'^i-gsiamfi • 

'!ft5AE?#4€^iiidM • m'■^^m^m 
u,. ji$ n #11 ibH m 1 5 mzn m i^^c 



5. BiosHti^iieitti^^s^ss^AM 

K^M BIOS €*if .'jtJt=-tifl1tifiit. 

:(t. ix^m^^snnmrnm \-}mz.mwi^^t^ 

III itnm--m w. ■ ti§ ^ it m 

35. f 'x^M. Bios-£tT/£4'j: i.li:,:i}i§^l:l'.l$r;j 



— ISOl -■ 



9 



(4) 



BtHil^-raW^ A. FLASH leis 



L 

\ f- 




\ 0 



^^^^^ 



i ] 



— 18112— 



(5) 



Ann 



T 

__i I 



/ 



. 



t 

I 

I 
I 
I 
\ 



l-t . ^ I ^ps<«J^ 



11 



rizgi 

















\ 






I 

























— IS()3— 



J i1 



r 




ia<iFlj\SHi2.'ittt 



vSfo 



c 



SMI 



\ 



I 
I 



26^ 



f/NI 



C ) 











*SMM 



24? 



29o 



— 1804— 



(7) 




r 



^1 & 



— IS()5-- 



10 



© O 

Attorney Docket Ref: 42390.P3376 

Methods And Apparatus For Preventing: Unauthorized Write Access 
To A Protected Non-volatile Storage 

BACKGROUND OF THE INVENTION 

1. Field of the Invention 

The present invention relates to the field of computer systems. More 
specifically, the present invention relates to data security on computer systems. 

2. Background Information 



Existing methods of preventing unauthorized write access to non- 
volatile storage such as FLASH memory typically rely on "secret" access methods to 
1 5 a write enable circuit. These "secret" access methods to the write enable circuit can 
be reverse-engineered through the use of standard debugging hardware. Once 
' reverse engineered, a person will be able to produce code that can write to the 
"protected" non-volatile storage at will. If the code is used in a malicious manner, it 
can be used to introduce viruses into the "protected" non-volatile storage or even 
20 destroy the content of the non-volatile storage. 

Thus, it is desirable to have a more robust approach to preventing 
unauthorized access to non-volatile storage, in particular, an approach that does not 
rely on the access method not being known. As will be described in more detail . 
25 below, the present invention achieves these ?nd other desirable results. 
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.qUMMARY OF THE INVENTJON - 



10 



In accordance to the present invention, an electronic signature is 
generated in a predetermined manner and attached to a transferable unit of write 
data, to facilitate authenticating the write data before allowing the write data to be 
written into a protected non-volatile storage. The write data is authenticated using a 
collection of secured authentication functions. Additionally, the actual writing of _ 
the authenticated write data into the protected non-volatile storage is performed by 
a secured copy utility. 



The electroruc signahire is functionally dependent on the content of the 
write data, and the predetermined manner of generating the electronic signature is 
reproducible during write time. In one embodiment, the electironic signature is 
generated by the creator of the write data, by generating a digest based on the 
1 5 content of the write data using a message digest function, and then encrypting the 
generated digest with a secret private key using an encryption function. 

The collection of secured authentication functions include a secured 
corresponding copy of the message digest function, and a secured complementary 

20 decryption hmction. During operation, the secured decryption function 

reconstitutes the original digest by decrypting the electronic signature with a 
secured complementary public key, while the secured copy of the message digest 
function generates another digest based on the content of the write data to be 
authenticated. The two digests are compared using a secured comparison function. 

25 If the two digests pass th6 comparison, the secured copy utility is invoked to copy 



1 



Albrecht at al. - M&A For Preventing 
Unauthorized Write Access To A 
Protected Mon- Volatile Storage 



3 



ATA/jh 



Attorney Docket Ref: 42390.P3376 

the authenticated write data into the protected non-volatile storage, otherwise, the 
write data are rejected. 

In one embodiment, the authentication functions are secured by 
copying them into a normally unavailable system management memory during 
system initialization. The authentication functions are inVoked using a system 
management interrupt (SMI), which when asserted; automatically maps the system 
management memory into the normal system memory space. A non-volatile 
memory write security circuitry is provided to qualify a memory write signal 
provided to the protected non-volatile storage, and to generate the SMI whenever a 
write to the protected non-volatile storage is requested. 
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RRTEF DESCPTPTTON OF DRAWINGS 



The present invention wUI be described by way of exemplary 
embodiments, but not limitaHons, illustrated in the accompanying drawings in 
which like references denote similar elements, and in which: 

Figures 1 - 2 illustrate the essential elements of the present invention, 
and their interrelationships with each other; 

Figure 3 illustrates an exemplary computer system incorporated with 
the teachings of the present invention on securing the authentication functions; 

Figure 4 Ulustrates the system BIOS, and for one embodiment, the 
operating system of the exemplary computer system in further detaU; 

Figure 5 illustrates the FLASH security circuitry of Figure 3 in hirther 

detail; 

Figure 6 Ulustrates execution flow of the exemplary computer system 
under a system management mode; and 

Figure 7 illustrates one embodiment of the execution flow for writing 

into FLASH memory. 
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DETAILED DESCRIPTION OF THE INVENTION 



In the foUowing descripHorv for purposes of «planaHon, specific 
nurabers, materiab ar,d conf igurattons are set forth in order to provide a thorough 
understanding of the present invention However, it will be apparent to one skUled 
in the art that the pr«en. invention may be practiced without the specific details. In 
other ir^tances, well known feabares are omitted or simplified in order no. to obscure 
the present invenhon. Furthermore, for ease of understanding, certain method steps 
are delineated as separate steps, however, these separately delineated steps should 
not be construed as necessarUy order dependent in their performance. 

Referring now to Figures 1 and 2, two block diagrams illustrating the 
essenhal elements of the present invention, aid" their interrelationships to each other 
are showr. As iUustrated, a trar^ferable unit of non-volatile storage write data 100 ,s 
provided with an electronic signa^^re 102 to facilitate authenticating write data 100 
prior to allowing write data 100 to be written into a non-volatile storage. Preferably, 
electronic signatiare 102 is "atuched-'to write data 100. Examples of a transferable 
unit include a fUe, or a block, whereas examples of non-volatile storage include 
FLASH memory or erasable prograrr^ble read-ordy-memory (EPROM). Examples 

of write data is system basic input/output service (BIOS) updates, such as additions. 

deletions and modifications. For many applicatio,., it is expected that electtomc 

signatiire 102 U generated and "attached" to write data 100 a. the time write data 100 

is created. 

For the Ulustrated embodiment, electronic signatiare 102 is generated by 
encrypting a reference diges.104 with a secret private key 106 using an encryption 

ATA/jh 
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function 108. The reference digest 104 is generated using a message digest mnction 
110. In other words, the content of reference digest 104 is functionally dependent on 
the content of write data 100. Accordingly, the content of electronic signature 102 is 
also hmctionally dependent on the content of write data 100. 

At write time, a secured corresponding copy of message digest function 
112 generates a "new" digest 114 in real time. At the same time, a secured 
complementary decryption function 116 reconstitutes original reference digest 104 by 
decrypting electronic signature 102 using secured complementary public key 118. 
The two digests 104 and 114 are provided to a secured comparison function 120 to 
determine I they are identical. The two di_gest3 104 and 114 are identical if write data 
100 is authentic, since both digests 104and 114 are functionally dependent on the 
contents of write data 100, generated by copies' of the same message digest hxnction 
110 and 112, and the encryption were decrypted in a complementary manner. If the 
two digests 104 and 114 compared successfully, a secured copy function 122 is 
notified to perform the achxal writing into the protected non-volatile storage, 
otherwise the write data is rejected. 

Encryption and deciyption funcSons 108 and 116 may implement any 
one of a number of private/ public key encrypdon/decryption techniques known in 
the art. Similarly, message digest funcHon ll(yil2 may also implement any one of a 
" number of message digest techniques known in the art. For further iriormation on 
private/public key encryption/ decryption techniques, see e.g. Hellman e. al...Pubhc 
Key Cryptographic Apparatus and Method. US Patent 4,218.582. and Rivest et al.. 
Cryptographic Communications System and Method, US Patent 4,405,829; and for 
further informaHo,^ message digest, see e.g. Method for Identifying Subscribers 
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and for Generating and Verifying Electronic Signatures in a Data Exchange System, 
US Patent 4,995,082, and Rivest, The MD5 Message Digest Algorithm, Request For 
Comment (RFC) 1321, Apr. 1992. 

Creation of electronic signahire 102 and associating it with write data 
100 as described above, may be practiced in any number bf computer systems 
known in the art, provided they are equipped to store and execute message digest ^ 
function 110 and encryption function 108. It is anticipated that for most 
applications, creation of electronic signature 102 will be practiced on the same 
computer system where write data 100 is created. For example, for the above 
mentioned system BIOS update application, it is anticipated that the system BIOS 
updates and electronic signature 102 will be generated and associated at the same 
time and on the same computer system. 

Figure 3 illustrates an exemplary computer system 200 incorporated 
with the teachings of the present invention on authenticating write data before 
allowing the write data to be written into a protected non-volatile storage. 
Exemplary computer system 200 includes processor 212, processor bus 214, cache 
memory 216, memory controller 218, and a plurality of other memory units 220 - 224 
coupled to each other as shown. Other memory units 220 - 224 include main 
memory 220, system management memory 222, and FLASH memory 224. In 
accordance to the present invention, exemplary computer system 200 includes in 
particular FLASH security circuitry 226. Addirionally, computer system 200 
includes bridge circuits 228a - 228b, high performance and standard (input/ output) 
I/O buses 230a - 230b, general purpose I/O (GPIQ) ports 232, hard and diskette 
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Storages 234 - 236, keyboard and cursor control device 238, and display 240, coupled 
to each other and the above enumerated elements as shown. 

For the Ulustrated embodiment, buses 214, 230a and 230b are disposed 
on motherboard 242. Elements 212, 216 - 226, 228a - 228b and 232 are either 
removably interconnected to motherboard 242 via sockets (not shown) or "soldered" 
onto motherboard 242, whereas elements 234 - 238 a^e coupled to motherboard 42 , 
through cables and connectors (not shown). 

Processor 212 performs the conventional function of executing code. 
Processor 212 is equipped to execute code in multiple modes including a system 
management mode (SMiM). Processor 212 is also equipped to respond to a wide 
variety of interrupts.including a system management interrupt (SMI), which places 
processor 212 in SMM. Memory controller 218 and volatile memory units 216, 220 
and 222 perform the conventional functions of controlling memory access, and 
providing execution time storage respectively. In particular, for each write access to 
memory, memory controller 218 generates a MEMW# signal for the addressed 
memory unit. Memory controUer 218 normally does not map system management 
memory 222 as part of the normal system memory space. System management 
memory 222 is mapped into the system memory space, when processor 212 enters 
SMM. Furthermore, except for system initialization, processor mode transition, and 
execution in SMM; system management memory 222 is write disabled. 

FLASH memory 224 performs its conventional function of providing 
non-volatile storage respectively. In particular, FLASH memory 224 stores system 
BIOS. During systern initialization, the bulk of the system BIOS that are not security 

o .^TA/jh 
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sensitive are loaded into main memory 220, whereas the remaining system BIOS 
(including in particular the write data authentication functions) that are security 
sensitive are loaded into system management memory 224. Flash security circuit 
226 protects FLASH memory 224 from unaudiorized write accesses, by keeping 
FLASH memory 224 write disabled, and generating an SMI to invoke the secured 
system BIOS write data authentication functions in system management memory 
222 to authenticate the write data, whenever it enables FLASH memory 224 for a , 
write access. General purpose I/O ports 232 also perform their conventional 
functions for providing I/O ports to a variety of peripherals. In particular, one of 
the I/O ports is used to notify FLASH security circuit 226 of a write request to 
FLASH memory 224. The write request is denoted by writing to a corresponding 
register of the I/O port using a standard I/O instruction of exemplary computer 
system 200. 

Hard disk storage 234 also performs the convenrional function of 
providing non-volatile storage. In particular, hard disk storage 234 stores operating 
system of exemplary computer system 200. During system initialization, operating 
system is loaded into main memory 220. All other elements perform their 
conventional function known in the art. Except for the particularized hmctions 
and/or requirements, all enumerated elements are intended to represent a broad 
category of these elements found in computer systems. 

Figure 4 iUustirates system BIOS and operating system of exemplary 
computer system 200 in further detail. As shown, system BIOS 260 includes init 
function 262, FLASH copy utility 264, message digest function 266, decryption 
function 268, public key 270, digest comparison function 272, SMI handler 274 and 
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read/write service 276, whereas, for some embodiments, operating system 250 
includes FLASH utility 252. 

Init function 262 initializes system BIOS 260 during system 
initialization, including loading FLASH copy utility 264, message digest function 
266, decryption function 268, public key 270, digest comparison function 272, and 
SMI handler 274 into system management memory 222. As described earlier, . 
system management memory 222 is normally not mapped into system management 
space, unless a SMI is triggered placing processor 212 in SMM, and system 
management memory 222 is write disabled except for initialization, processor mode 
.transition, and execution in SMM. Accordingly, these system BIOS functions are 
secured from malicious modification. - 

SMI handler 274 services SMIs, invoking other functions (including the 
write data authentication functions) as necessary, depending on the cause of a 
particular SMI. As will be described in more detail below, SMI handler 274 is given 
control upon entry into SMM. As described earlier, message digest 266 generates a 
digest in real time for the write data of a FLASH write request, in accordance to the 
coltent of the write data, and decryption function 268 decr>Tts the electronic 
signature "attached" to the write data of the FLASH write request using public key 
270, to reconstitute the FLASH write data's original digest. Digest comparison 
function 272 compares the two digests, and finally FLASH copy utility 264 performs 
the actixal writing of the authenticated data into FLASH memory 224. Message 
digest function 266, decryption function 268, digest comparison function 272, and 
FLASH copy utility 264 are invoked in due course by SMI handler 274 upon 
determining that a SMI is triggered by FLASH security circuitry 226. 
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Read/ Write services 276 provides read ai\d write services to I/O 
devices. Read/Write services 276 are among the bulk of the BIOS functions that are 
loaded into main memory 220 during system start up. 

5 

For some embodiments, FLASH utility 252 is included to perform 
various FLASH related functions including in particular copying of FLASH write , 
data from an external source medium to a buffer in main memory 220, and then 
copying the FLASH write data from the buffer into FLASH memory 224 by way of 

10 read/write services 276, which invokes message digest function 266, decryption 
function 268, etc., to validate the FLASH ^vrite data, and if validated, FLASH copy 
utility 264 to perform the actual writing, to be described more fully below. 
Examples of such FLASH write data are system BIOS additions, deletions, and 
modifications described earlier, and an examj,le of an external source medium is a 

1 5 diskette. 

Figure 5 illustrates FLASH security circuit 226 in further detail. As 
shown, FLASH security circuit 226 includes first and second drivers 278 and 280. 
The input (ENFW#) of first driver 278 is provided by one of the I/O ports of GPIO 
20 ports 232, whereas the output of first driver 278 is coupled to a signal line coupling a 
SMI brigger mechanism to processor 212. Thus, whenever, GPIO ports 232 sets 
ENFW# active to enable write access, in response to a FLASH write request, first 
driver 278 causes a SMI to be triggered for processor 212. 

25 The inputs (ENFW# and MEMW#) of second driver 280 are provided 

by the same I/O port of general purpose I/O ports 232 and memory controller 218 
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respectively, whereas the output (FLASHWE#) of second driver 2S0 is provided to 
FLASH memory 224. FLASHWE# is tri-stated. FLASHWE# becomes active, when 
both MEMW# and ENFW# are active. In other words, the write signal (MEMW#) 
from memory controller 218 is qualified by ENFW#, which at the same time through 
first driver 278 would cause a SMI to be triggered. Thus, the secured authentication 
functions stored in system management memory 222 would be invoked to 
authenticate the write data before allowing them to be written into FLASH memory 



224. 



Figure 6 musti:ates execution flow of the exemplary computer system 
in SMM. As shown, upon detectionof an SMLprocessor 212 directs memory " 
contaroller 218 to switch in and map system management memory 222 as part of the 
system memory space, and in response, memory controller 218 performs the 
requested switching and mapping accordingly, step 282. Next,-processor 212 saves 
the processor state into system management memory 222, step 284. Upon saving the 
processor state, processor 212 transfers execution control to pre-stored SMI handler 
274, step 286. 

SMI handler 274 then determines the cause of the SMI and services the 
SMI accordingly, invoking other routines such as the authentication hmctions as 
necessary. Upon servicing the SMI, SMI handler 274 executes a Resume instruction 
to hransfer execution conbrol back to the interrupted programs. In response, 
processor 212 restores the saved processor state from system management memory 
222, step 288. Furthermore, processor 212 directs memory controller 218 to unmap 
system management memory 222 from the system memory space and switch out 
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system management memory 222. In response, memory controller 218 performs the 
requested unmapping and switching accordingly, step 290. 

As a result, the SMI is serviced in a manner that is transparent to the 
executing operating system, subsystems as well as applications. In other words, an 
SMI is a transparent system service interrupt. 

Figure 7 illustrates one embodiment of the execution flow for writing 
data into FLASH memory 224. As shown, in response to a write request from an 
application, such as FLASH utility 252 described earlier, read/ write services 276 set 
up the physical address pointers to the write data, step 302. Next, for the illustrated 
embodiment, read/ write services 276 generate a software SMI to enter SMM and.to 
provide the SMI handler with the physical address pointers of the write data, step 
304. A software SMI is used and preferred at this point in time-as opposed to the 
designated GPIO port 232 because FLASH memory would remain disabled during 
the authentication process. 

Upon entry into SMM, as d«cribed earlier, SMI handler 274 is given 
control. Upon ascertaining the reason for the SMI, SMI handler 274 invokes 
message digest 266 and decrypHon funcHon 268 to authenticate the write data 
identified by the physical address pointers, step 306. If the >vrite data fails the 
authenHcation process, step 308, SMI handler 274 sets the appropriate error flags, 
step 310, clears the designated GPIO port, step 316, and exits SMM. Upon given 
control again, read/write services 276 returr. to the caller, after performing the 
necessary "clean ups". 
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On the other hand, if at step 308, the write data passes the 
authentication process, SMI handler 274 enables write to FLASH memory 224, by 
setting the designated GPIO port 232, step 312. Once enabled, the authenticated 
write data are copied into FLASH memory 224, step 314. After all authenticated 
5 write data have been copied, as described earlier, SMI handler 274 clears the 

designated GPIO port 232, and exits SMM. Upon given control again, read/ write 
services 276 returns to the caller, after performing the necessary "clean ups". 

As described earlier, when SMI handler 274 enables write to FLASH 
10 memory 224 by way of the designated GPIO port, in addition to enabling FLASH 
memory 224 for write, a SMI is triggered. However, since this "new" SMI is 
triggered while the system is in SMM, the "new" SMI is discarded. The reason why 
thJ"new" SMI is triggered is because for the illustrated embodiment, the designated 
GPIO port 232 may be set outside SMM. The "automatic" SMI will ensure that the 
1 5 write data will be authenticated in the event that happens, preventing any 
possibility of bypassing the authentication process. 

Thus, methods and apparatiis for preventing unauthorized access to a 
protected non-volatile memory have been described. While the method and 

20 apparatiis of the present invention has been described in terms of the above 

aiustrated embodiments, those skilled in the art will recognize that the invention is 
not limited to the embodiments described. The present invention can be practiced 
with modification and alteration within the spirit and scope of the appended claims. 
The description is thus to be regarded as illustrative instead of restrictive on the 

25 p resent invention.. 
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ARqTRACT OF THF. DISCLOSURE ^ 

An electronic signature is generated in a predetermined manner and 
attached to a transferable unit of write data, to facUitate authenticating the write 
data before allowing the write data to be written into a protected non-volatUe 
storage. The write data is authenticated using a collection of secured authentication 
functions. Additionally, the actual writing of the authenticated write data into the 
protected non-volatUe storage is performed by a secured copy utUity. 
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ROC (Taiwan) Patent Application No. 86101 163 
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1. In a computer system comprising a protected non-volatile storage, a 
computer implemented method for protecting the non-volatile storage from 
unauthorized write access, the method comprising the steps of: 

a) securing a plurality of authentication functions on the computer system, 
the authentication functions being equipped to authenticate write data of a write 
access to the non-volatile storage using an electronic signature associated with the 
write data, the content of the electronic signature being functionally dependent on 
the content of the write data; 

b) invoking the authentication functions to authenticate write data of each 
write access to the non-volatile storage, and allowing only authenticated write data 
to be written into the protected non-volatile storage. 

2 The computer implemented method as set forth in claim 1, wherein step (a) 
comprises securing the authentication functions in a secured portion of memory of 
the computer system. 

3 The computer ixnplemented me*od « «t forth in claim 2, wherein the 
au*enScation hmcHon. of step (a) are in,plemer>,ed as a plurality of system basic 
input/output services (BIOS) of the computer system; and step (a) comprises 
copying the plurality of system BIOS into system management memory of the 
computer system during system initialization, the system management memory 
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1 being normally not mapped into a normal system memory space of the computer 

2 system except when the computer system is executing in a system management 

3 mode, and the system management memory being write protected except for system 

4 initialization and system execution mode traxxsition. 



1 4. The computer implemented method as set forth in claim 1, wherein the 

2 associated electronic signature is generated by encrypting a first digest with a secret 

3 private key, the first digest being generated based on the content of the write data of 

4 the write access; and step (b) comprises 

5 (b.l) invoking a secured decryption hmction of the secured authentication 

6 functions to reconstitute the first digest by decrypting the associated electronic 

7 signature using a secured public key complementary to the secret private key, 

8 (b.2) invoking a secured message digest function of the secured 

9 authentication functions to generate a second digest based on the content of the 

1 0 write data of the write access, and 

1 1 - (b.3) invoking a secured digest comparison function of the secured 

1 2 authentication functions to determine if the write data of the write access is 

13 authentic by comparing the first and second digests. 

1 5. The computer implemented method as set forth in claim 4, wherein step (b) 

2 further comprises step (b.4) conditionally invoking a secured copy utUity of the 

3 secured authentication hmctions to copy the write data into the protected non- 

4 volatile storage if the first and second digests compared successfully in step (b.3). 



1 6. A computer system comprising: 

2 ' ' (a) a non-volatile storage; 
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1 (b) a plurality of authentication functions for authenticating write data of a 

2 write access to the non-volatile storage during operation, the authentication 

3 functions authenticating the write data using an electronic signature associated with 

4 the write data, the content of the electronic signature being functionally dependent 

5 on the content of the write data; 

6 (c) a secured memory unit for storing and securing the pluraUty of 

7 authentication functions during operation; and 

8 (d) a processor coupled to the non-volatile storage and the secured memory 

9 unit for invoking the authentication functions during operation to authenticate write 

10 data of each write access to the non-volatile storage, and to allow only authenticated 

11 write data to be written into the non-volatile storage. 

1 7. The computer system as set forth in claim 6, wherein the plurality of 

2 authentication functions include 

3 a decryption function for reconstituting a first digest by decrypting the 

4 electronic signature wi^h a public key, the electronic signature being generated by 
. 5 encrypting the first digest with a secret private key in a complementary manner, 

6 a message digest function for generating a second digest based on the content 

7 of the write data of the write access in the same manner the first digest was 

8 generated, and 

9 a digest comparison function for determining whether the write data of the" 

10 write access is authentic by comparing the first and second digests. 

1 8. The computer system as set forth in claim 1. wherein the decryption function, 

2 the message digest function and the digest comparison function are implemented a^ 

3 a plurality of system basic input/output services (BIOS) of the computer system, 

_ ATA/jh 
Albrecht at al. - M&A For Preventing 3 
Unauthorized Write Access To A 
Protected Non-Volatile Storage 



Attorney Docket Ref: 42390.P3376 

which are copied into the secured memory unit during system initialization, the 
secured memory unit being normally not mapped into a normal system memory 
space of the computer system except when the processor is executing in a system 
management mode, and the secured memory unit being write protected except for 
system initialization and processor execution mode transition. 

9. The computer system as set forth in claim 8, wherein 

the non-volatile storage is a FLASH memory storage unit for storing system 

BIOS; 

the decryption function, the message digest function, the digest encryption 
function and the public key are pre-stored in the FLASH memory storage unit; 

6 the computer system further includes main memory coupled to the processor; 

7 and 

8 the write data of the write access are system BIOS updates staged in a buffer 

9 in the main memory. 

1 10. The computer system as set forth in claim 9, wherein 

2 the computer system further includes a memory controUer coupled to the 

3 processor, the main memory, the secured memory unit and the-FLASH memory for 

4 controlling memory access; 

5 a FLASH security circuit coupled to the memory controller and the FLASH 

6 memory for qualifying a write signal provided by the memory controller to the 

7 FLASH memory for the write access, and for generating an interrupt to place the 

8 processor in the system management mode. 

1 11. The computer system as set forth in claim 10, wherein 
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the computer system hirther includes an I/O port coupled to the processor 
and the FLASH security circuit for notifying the FLASH security circuit of the write 
access. 

12. The computer system as set forth in claim 7, wherein the plurality of 
authentication hinctions further include a copy function for conditionally copying 
the write data of the write access into the non-volatile storage if the digest 
comparison function successfully compares the first and second digests. 

13. A computer system motherboard comprising: 

(a) a non-volatile memory storage unit; and 

(b) system basic input/output service (BIOS) stored in the non-volatile 
memory storage unit, the BIOS including a plurality of authentication functions for 
authenticating write data into the non-volatile storage unit during operation of a 
computer system integrated with the computer system motiierboard, the 
authentication functions authenticating the system BIOS updates Using an electronic 

8 signahire associated with the system BIOS updates, the content of the electironic 

9 signahire being hinctionally dependent on the content of the system BtOS updates. 

1 14, The computer system motherboard as set forth in claiin 13, wherein the 

2 computer system motherboard hirther includes 

3 (c) main men^ory for staging the system BIOS updates in a buffer. 

1 15. The computer system motherboard as set forth in claim 14, wherein the 

2 computer system motherboard further includes 
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(d) system manage-nem memory for storing ar,d securing .he plurality o£ 
authentication funcHon. during operation of the computer system, the plurality of 
authentication hmcHons being copied into the system management memory durmg 
system irutialization, the system management memory being normally not mapped 
into a norm^ system memory space of the computer system except when the 

6 computersystemise.eo.ti„ginasystemmanagementmode,andthesystem 

7 management memory being write protected except for system ir^tiali^ation and 

8 system execution mode transition.. 

«i.^orKr>ard as set forth in claim 15, wherein the 
1 16. The computer system motherboard as set rorui 

7 computer system motherboard further comprises 

: (e) a processor coupled to the non-volatile memory storage and the system 

4 managementmemoryforinvolcingtheauthenticationfunctionsdurmgope^^^^^^^^^ 
.hecomputersysteminsystemmanagementmode to authenticate the systemBIOS 

updates, and to allow only authenticated system BIOS updates to be written from 
the buffer of main memory into the nonvolatile memory storage umt. 



5 
6 
7 



m 



1 17. Thecomputersystemmotherboardassetforthinclaiml6,whereinthe 

2 computer system motherboard further comprises: 

3 (f)amemorycontrollercoupledtotheprocessor,themainmemory,the 

. ^omorv and the non-volatile memory storage unit for 

4 system management memory ana cnenwi 

5 conbroUing memory access; 

, W a non-volatile memory access security circuit coupled to the memory 

7 controulr ar.d the non-volatUe memory storage unit for qualifying a write signal 

8 provided by fhe memory controUer to the non-voU«le memory storage unrt for 

9 Lteaccessinitiat^towritethesystemmbsupdatesintothenon-volatilememory 
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storage unit, and for generating an interrupt to place the computer system in the 
system management mode. 

18 The computer system motherboard as set £or.hir> claim 17, wherein the 
computer system motherboard further includes an I/O port coupled to the 

. processor and the non-voUtUe memory access security circuit for notifying the non- 

4 volatUe memory security dicuit of the write access. 

1 19. The computer system motherboard as set forth ir. claim 13, wherein the 

2 plurality of authentication hmctions include 

3 a decryption function for reconstituting a first digest by decrypdng the 

4 electtoruc signaBare with a public key, the electric sigrtat^e being generated by 

5 encryptirvgthefirstdigestwithasecretprivatekeyinacomplementarymanner, 

6 a message digest function for generattag a second digest based on the content 

7 of the system BIOS updates in the same marmer the first digest was generated, and 

8 . adigestcorhparisonfunctionfordeterminirvgwhetherthesystemBlOS 

9 updates are authentic by comparing the first and second digests, 

1 ,0 Thecou,u.«s^-..erbo3raasse.forthinol^:..wh.rein.heph3^ 

2 authendcadon hmcdons further include a copy function for conditionally copymg 
the system BIOS updates mto the non-volatile memory storage unit if the drgest 
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4 comparison 



functioA successfully compares the first arxd second digests. 
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